Collaborative Research: SaTC: EDU: Hardware Security Education for All Through Seamless Extension of Existing Curricula

合作研究：SaTC：EDU：通过无缝扩展现有课程为所有人提供硬件安全教育

• 批准号: 2114165
• 负责人: Swarup Bhunia
• 金额: $ 9万
• 依托单位: University of Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2021
• 资助国家: 美国
• 起止时间: 2021-07-01 至 2025-06-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2114165&HistoricalAwards=false
• 关键词: Collaborative; Research; SaTC; EDU; Hardware

The field of cybersecurity has focused predominantly on the security of software and the communication network due to the assumption that the underlying hardware is trustworthy and reliable. However, emerging hardware attack methods have originated from untrustworthy global supply chain sources and vulnerabilities inherent to the hardware. To address these challenges, the government and industry are in urgent need of cybersecurity professionals trained to counter hardware-oriented attacks. However, most students are insufficiently prepared because existing undergraduate curricula for electrical and computer engineering, computer science, and related programs focus primarily on the software and network aspects of cybersecurity. Few institutions have introduced dedicated hardware security courses and even when these courses exist, they are typically electives. This project aims to facilitate hardware security education for engineering undergraduate students by incorporating the relevant concepts into existing core courses. The project will broaden undergraduate students’ participation; advance their knowledge; and create a well-trained and diversified cybersecurity workforce with essential knowledge of hardware security. The security-integrated contents of various core courses will be made available online for all universities and community colleges nationwide. The participation of students who are members of underrepresented groups in cybersecurity education and research should also be catalyzed by this effort. This project aims to integrate theoretical and practical training on six foundational hardware security concepts in core courses related to digital design and embedded systems. Course modules will be distributed to the broader community after evaluation by industry and academic experts. Existing theory and lab modules within the target core courses will be augmented with security-oriented concepts through a ‘contextual learning’ process, so that they will strengthen the materials of the core course while educating on security. The course materials, modules, and findings will be shared publicly using the PIs’ webpages and well-established online platforms for hardware security, such as Trust-Hub and CADforAssurance. This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

由于底层硬件是值得信赖和可靠的，网络安全领域主要关注软件和通信网络的安全。然而，新兴的硬件攻击方法源于不可信的全球供应链来源和硬件固有的漏洞。为了应对这些挑战，政府和行业迫切需要经过培训来应对面向硬件的攻击的网络安全专业人员，但大多数学生准备不足，因为现有的电气和计算机工程、计算机科学及相关课程的本科课程主要侧重于针对硬件的攻击。软件和网络方面很少有机构推出专门的硬件安全课程，即使存在这些课程，它们通常也是选修课。该项目旨在通过将相关概念纳入现有的核心课程来促进工程本科生的硬件安全教育。 ” 参与；提高他们的知识；并培养一支训练有素、具有硬件安全基本知识的网络安全队伍，各种核心课程的安全集成内容将在线提供给全国所有大学和社区学院的学生参与。谁是网络安全领域代表性不足群体的成员这项工作还应促进教育和研究，旨在对与数字设计和嵌入式系统相关的核心课程中的六个集成基础硬件安全概念进行理论和实践培训，并将在经过行业评估后分发给更广泛的社区。目标核心课程中的现有理论和实验模块将通过“情境学习”过程补充以安全为导向的概念，以便他们在进行安全教育的同时加强核心课程的材料。模块和调查结果将使用公开共享PI 的网页和成熟的硬件安全在线平台，例如 Trust-Hub 和 CADforAssurance 该项目得到安全可信网络空间 (SaTC) 计划的支持，该计划为解决网络安全和隐私问题（在本例中特别是网络安全问题）提供资金。 SaTC 计划与联邦网络安全研究与发展战略计划和国家隐私研究战略相一致，旨在保护和维护网络系统不断增长的社会和经济效益，同时确保安全和隐私。该奖项反映了 NSF 的法定使命和使命。通过使用基金会的智力价值和更广泛的影响审查标准进行评估，该项目被认为值得支持。